Re: Dameware mini remote control

[Phil Lambert <lambep () SHANDS UFL EDU>]

   We have recently moved away from Dameware, but it does offer a nice
variety of options related to security.
For instance, you can set the remote service to uninstall on
disconnect, start manually, and/or allow only administrators of the
machine to connect.  You can also require permission from the user
before connecting, send an "audit" type email to a shared mailbox, and
change the port on the listener.

   Dameware was one of the few products that offered enough of these
options to pass muster to get an official approval from hospital
administration, privacy office, HR, etc...


> > > "Ullman, Catherine" <cende () BUFFALO EDU> 5/19/2009 12:58 PM >>>

Actually, Dameware can authenticate with AD credentials…that’s exactly
what we use.
-Cathy


From:The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Clark, Sean
Sent: Tuesday, May 19, 2009 12:29 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Dameware mini remote control


The downside to Dameware is that you lose the ability to manage
passwords (length, complexity, duration, etc), since Dameware doesn't
authenticate via AD like RDP does.  By using a simple PW for Dameware,
users can effectively bypass all of your password requirements.

Sean Clark
Manager, IT Security/Email/UNIX Systems
UCDenver IT Services
Sean.Clark () UCDenver edu
303-724-0486

From:The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Ullman,
Catherine
Sent: Tuesday, May 19, 2009 9:39 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Dameware mini remote control
Jim,
We have been using Dameware for several years now to support our the
workstations of our administrative staff without incident.  One of the
nice security features is the ability for the service to completely
remove itself upon disconnection from the machine once you’re done
working on it.  We’ve had no issues with running both Dameware and
Symantec AV (starting with 8.x and currently at 10.x).  Please feel free
to contact me off list for additional information.
Best,
Cathy


Catherine J. Ullman
Systems Administrator
USS-CT
University at Buffalo
cende () buffalo edu



From:The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Mayne, Jim
Sent: Monday, May 18, 2009 6:05 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Dameware mini remote control


We have a vendor that supports our conference room display units
wanting to replace RealVNC and RDP to those displays with the Dameware
mini remote control application. Does anyone have any experience with
this product and its security and encryption?

Jim